Regenerate all test certificates

Signed-off-by: Jacek Ewertowski <jewertow@redhat.com>

pkg/istio-agent/agent_test.go

@@ -577,8 +577,6 @@ func TestAgent(t *testing.T) {
 		a.Check(t, security.WorkloadKeyCertResourceName, security.RootCertReqResourceName)
 	})
 	t.Run("GCP", func(t *testing.T) {
-		// FIXME: https://issues.redhat.com/browse/OSSM-755
-		t.Skip("https://github.com/istio/istio/issues/1")
 		os.MkdirAll(filepath.Join(wd, "var/run/secrets/tokens"), 0o755)
 		ioutil.WriteFile(filepath.Join(wd, "var/run/secrets/tokens/istio-token"), []byte("test-token"), 0o644)
 		a := Setup(t, func(a AgentTest) AgentTest {

tests/integration/security/file_mounted_certs/p2p_mtls_test.go

@@ -39,7 +39,7 @@ const (
 	ClientCertsPath  = "tests/testdata/certs/mountedcerts-client"
 
 	// nolint: lll
-	ExpectedXfccHeader = `By=spiffe://cluster.local/ns/mounted-certs/sa/server;Hash=26c953109afd32d8984af775406648c781a1b83e485fb5f064f75121125e664e;Subject="CN=client.mounted-certs.svc.cluster.local";URI=spiffe://cluster.local/ns/mounted-certs/sa/client;DNS=client.mounted-certs.svc`
+	ExpectedXfccHeader = `By=spiffe://cluster.local/ns/mounted-certs/sa/server;Hash=a2508db4657223f6af27efea213ffc884fd0d1f8a69e4053ce58ac66eb3b0ebe;Subject="CN=client.mounted-certs.svc.cluster.local";URI=spiffe://cluster.local/ns/mounted-certs/sa/client;DNS=client.mounted-certs.svc`
 )
 
 func TestClientToServiceTls(t *testing.T) {

tests/testdata/certs/default/cert-chain.pem

@@ -1,20 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIIDMjCCAhqgAwIBAgIUSolm1sWVWQlaC8av3xiZU7+fVTUwDQYJKoZIhvcNAQEL
-BQAwGDEWMBQGA1UEAwwNY2x1c3Rlci5sb2NhbDAgFw0yMjEwMjAwOTA3NTBaGA8y
-Mjk2MDgwNDA5MDc1MFowGDEWMBQGA1UEAwwNY2x1c3Rlci5sb2NhbDCCASIwDQYJ
-KoZIhvcNAQEBBQADggEPADCCAQoCggEBAK5rgbritI2vaieYcM3w4JXGbX1FYsdw
-CJvy02B6trSgow1huJff03wH+ZMUVCfVEYr493l3ASLL711xPYllvcaxjyexQbyn
-pAeO1m3RNrpkGZhU4E2KdhGifoLs7v7jSFZ53lE+vdcCFOSbgsshxGMPt7NrPZBk
-n1E6XSbAaAd4miqK2JUk1vUGzVAI6KILmeMRkvK+bZys6wjmTAd7rou+DcJIYWtm
-naGVkM0QO9weJ9/4doKcGVdy1JXmXAhdocAbqPUYCaf94V+jBcMVSDSWuih0exFH
-4LPL3SONq4zWZ/tnd3Mcy2ypVsWL7oJkErfCMuYPtYjA5Vnw9qyJNNECAwEAAaNy
-MHAwCQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwHQYDVR0lBBYwFAYIKwYBBQUHAwIG
-CCsGAQUFBwMBMDcGA1UdEQQwMC6GLHNwaWZmZTovL2NsdXN0ZXIubG9jYWwvbnMv
-ZGVmYXVsdC9zYS9kZWZhdWx0MA0GCSqGSIb3DQEBCwUAA4IBAQDDxBNlgZE8FH04
-vylt+TvIbdwCr8Td1aklgqEV9i2p5l548oL8uo1P9jtoy4NrBFIfI5IGTmfFZ3Xl
-6tG+E48MISMpyRl6E30rKLnFXC8m+97USkiconqSnNN7tdA9IldgWUOlxSkoKuud
-mMH+aUzSJvyd79pa764yQ4fVyEny6JCebERMrVGi0QOqC07d08tG0ut7iKJaTFkg
-mhikEIkqqEn0T19E/KZi+3b2Z3cRn11zv3ORs/66b4z05/TuEM5Cuz1by1k+0K3J
-KB+SWvMjPHoAPaul0yrXZyMsDbYL1luKAPcdbkJdxt0wfo5xWo0NeuXKglZ9qYa2
-d6ZfZhrj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 -----END CERTIFICATE-----

tests/testdata/certs/default/key.pem

@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEpQIBAAKCAQEArmuBuuK0ja9qJ5hwzfDglcZtfUVix3AIm/LTYHq2tKCjDWG4
-l9/TfAf5kxRUJ9URivj3eXcBIsvvXXE9iWW9xrGPJ7FBvKekB47WbdE2umQZmFTg
-TYp2EaJ+guzu/uNIVnneUT691wIU5JuCyyHEYw+3s2s9kGSfUTpdJsBoB3iaKorY
-lSTW9QbNUAjooguZ4xGS8r5tnKzrCOZMB3uui74Nwkhha2adoZWQzRA73B4n3/h2
-gpwZV3LUleZcCF2hwBuo9RgJp/3hX6MFwxVINJa6KHR7EUfgs8vdI42rjNZn+2d3
-cxzLbKlWxYvugmQSt8Iy5g+1iMDlWfD2rIk00QIDAQABAoIBAA6U8FCWeW/K9X3/
-8ZZWCACdiTPK5Do2NJINF/zd5X5uW5NX0x3nWX/qDsRsE6kM2B2dONtPxqmJESbn
-u7RL7DS7TXONDyjdfwoet/CQaBnnGniwx9vTspFA24DInCZ1C+wm3h4+t5JNG0AN
-fD7NQOTjQIFgetIih2s8DOObfFb7a9pmaq37pDWRrgVz0RcavRXp4OclChKng6Us
-l6QV1aYmVC43Teg0EzzJ+vCu3stupF6ZDbBmTBl580U0t+FcmdWqFlCWy6idHGaA
-PKd71oRIEx0NM07nlkbly6utoi5BIeEESd0sf+6TYUSgKdwYdfHlmW6imhCKH3Do
-3FDzHG0CgYEA1eobNAARgYxj0D3M4NEU/DJTHJ47nQzftK12/5vAJsUD8ZorpxJ4
-HQQETqn0kARTmGEk6F7RQxtqcTn65lM/YWO4xDVQ6aZEdq5vsRIfYsQM97OY9Vy2
-dxB8jhyRNreAesBcy+aHyxLJOMPLPTRI70U/HCs1euI/q7426/IbOQsCgYEA0Lw9
-4NZhZnP+6dyObRIOw2mtvmCRhcVpxRz0MJamSI9ETcCAthJhJGOSrDdNORM0HnWO
-KCrNMkqDzDM5TDaFUKe1dKCDsODXaa6xwiGupHDuVmzObDxmL0HXJ7Xb/WmTaLb+
-A3Y7JX42SIZ5mloBcD6fhzrfzaMVzsvKnkqBixMCgYEAuUulrsCUaXRzjZHK478Y
-/3CUP8js+JiLOxW7a6S9qJemV+TlBT7hXrj5Bi8AErQ8uVUExGhFumyIInZH2LWp
-xDG+fe91HD+TNH7bbzW0jDgox3QB/iAGSlK0oeErBIulti7k8xbI7+Zg+VPYvDaL
-Kv//r+XZ2I0c/CazqmQ4oosCgYEAyzzuNvQl4/6/Tm9s0fBKJaTJAdu+9XQRF1ao
-wIJ+p5mvVNFBwYXFxguZrUsvSopTLfEiGCQMpZH+IB4kBPv09GJHAKalctyJgaIR
-/EaVaBF5TvckSijJCexelJCzAVwBpmy+iRpeXpQ0QIuG7W4DhonDBIWjkfLf8fll
-cJh057cCgYEAm8K6N14JzmQ1qkTOm3GWalMwbdbiW3qRbak0Z3HawXqmxIUFTRrw
-f6SqGeN7KZKmyr9FEPUjxyiAdvP4tf1e8FIxOYAIuxZ8xWfNAABH6C/EtvnFMkHN
-zczd+KJ9trF7TT2f4NR4wK5X0irCQL1xKC+rQjUF0/dCKZs7gbCFmW4=
+MIIEogIBAAKCAQEAqMg9JSik6dfEuOaAkr9+1XtO2WMv/jCVw0s+TnX+emaayQd9
+xtjNEwdyAYfkO+Ig/w3TcSnexakGVT5BnDWZHujJAQweseag7SBgRNDM9/52XoW3
+fZieRMhB7JLq9s+P+LUNWpAR4v3OFusbvB4R6jvdW/4rN4icEa1UAVRGUOPHBNWo
+3SyErCzGfAGU91hSez1NFN3YJwW8FARjZ0t4QjfuBow1sKPUPojVdEWpF99RXCY8
+GvLLdWo6GM/+38E5mrsIi4+RIHURIfhoQGHfNHChDijToUtG8uQximkdp7mJ8AJh
+Kv1HuC8CH4HTk6icq8dC2UpnmD5nzJfAOaUI+QIDAQABAoIBAGLvfWgauxCX+iio
+dRWQSri43y9uhONrd15S7OLxJ4p4OqM8UO4Oh6dv5dQf5Bl2JAFeCWN8N6mFusCd
+DbiTcn471hdXE2cU2aAmKkgsXPnBn4EowLZOj/ehq4MRW8nxQWN4PauoZ9O3Euc8
+SbWrqrSzAr657ntPCK0T/PoKfG1NI7WfFctpZTBf2ANYLRmm6mvOp2kyYKI9prRc
+3GDLt4cInmMVkbiCHJ1aYaltK1WMV5knrTLCuVcdy3Zqh7lalESexEh7SLTGeT+q
+FV0MJQKS7WmsxMLSb/IuaxZWZbQO+OejmaMfVv11g2x1kCppgR6nmH6uwuxd8vO/
+KZEjQkECgYEA1x/giDW7AwhzIr1g3DTqX5elFfUaANcKtmVnVoFqYSWaRju3YQ06
+XQQyL0w6fEYiGHQAfEJ16/Qx4IUIfzCLB820Nl5hdu9ZueDQ+TCVTuFnIREEn6tA
++NqTkea7sYnQXuFvsu/xKMmu38ozTWK+CWYoyJtsPH6Rd1Ux4clySyMCgYEAyNor
+iRLsi2I5vmEDIY6VlcoodCqTQy7waDAHdFZP0LkHmhERrg3LoXQwDvDSNQLXQdOS
+/q7n11X9lXiM+b2ybN/8NMD2HiLud06Q9NM6Q6voO+E+wyhRZ1VrngIihRp3vguB
+FFR4YbLQvBHBRa9OS/5xpgWF39uCS4KvkBGlOzMCgYBst09hhsXb4olNJSeuIY/Q
+f3KOhi99/S8MvnJa5Uw9jCNLGyKxiV3VZCl4fa2Q4GCauwUDxxKRC/eo35JLtNyO
+NQa98zSORqexqEvzovnRw1e6/j638nQDT3MEaPax4lPLn2Izq87ULhiSQD1s/lnL
+pjU2LFWmvNAG3qc20/dOwQKBgF9ggsXvz5YMyeDmzobT36KmwfkP8qg3lP/UtuV+
+yx4Rj1ORAXVGpckAlIWzxA5aT/+5SZdZVUzDT8z31vINK7pZzrj6XKVI7zaGf31T
+BNr3uisdNiGUdrt8K8N3vg64193ONriBuDyknkyAnefKbILXy/4Lp1v7L+9NmrLu
+PilTAoGALwV9FbwzssOtN5M/ta3xC9DCobhJ2VA+sZgAqRI02bYirT/UYSTAgAuM
+WgNS0Rr72FdVW5uE7xdD5EzabZI7BB3c8M/rKF33P/XWcRYvuxOTs2DJJMlVG/jc
+5kO45QAAAInEnvjW4cmBaibhamgi/mn2LOzsgGjHPLP8kqnfQ5M=
 -----END RSA PRIVATE KEY-----

tests/testdata/certs/default/root-cert.pem

@@ -1,19 +1,19 @@
 -----BEGIN CERTIFICATE-----
-MIIDEzCCAfugAwIBAgIUEYOnqyP/kjrOd3CfHA7D0TWEtnEwDQYJKoZIhvcNAQEL
-BQAwGDEWMBQGA1UEAwwNY2x1c3Rlci5sb2NhbDAgFw0yMjEwMjAwOTA3NTBaGA8y
-Mjk2MDgwNDA5MDc1MFowGDEWMBQGA1UEAwwNY2x1c3Rlci5sb2NhbDCCASIwDQYJ
-KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMQwa+3fY1hOjQOfwwDNoS350nLKMa/4
-S7VUzLwSSCUoCpk6YelEaheqgfZE8YN8ODSBOWuOsFXNvDtAqwGq2bNeYvCWryy6
-ySTn0kwNhQgBlUDUqr0wvotGghzTH/PXYCp+INGOm675enn+diMOvt4SPjh4Dr+W
-JFI7Nf0MVwjFmog4juG2EgXEG3gDO0tr7WHe5ZUuyxE4DbyvRZkZPsmVyctok9mj
-ZmUqiNlVhPSxi4qw6PMcX/tQ8LufgCp45tI6S25XU0wOXydZXwkX7bGOH1sjhOFh
-KqEkkQj1MjC/RcrGQRPoW09UDmB+Kzks//P1yu2Ew2ujF8r7i+9J3VcCAwEAAaNT
-MFEwHQYDVR0OBBYEFEzCXbzY+R7vft1VCAa+GWwUXJZ5MB8GA1UdIwQYMBaAFEzC
-XbzY+R7vft1VCAa+GWwUXJZ5MA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL
-BQADggEBAILlloljE4ZChm0PN+esGbx2paacsq/JMMKey3TWjb4rqrgIBRcQ1zgz
-7yREUqWiZpUcVTwo1J9tX5ngkqemXwJMhCGcjW7F6b7+7vJDoRSNrQP79z7WOaq1
-No3aB4KtHt6q7/BOYGecLOJnce8dQgnfAht88xzqKDjBLm1qpLJMqb8EGl8OuneO
-ULizOCHHUnuqWOmu9lo8NoO2DaWpBs/mLsd1ff/nnlz00dwFq1kzALlktk+naF5K
-kDftUSTFKcfbBHHYWeCE/CBuZALsGDlpwa9mPIx80NyeViVDGTBbwc1wXJNsayS4
-xzuV17cTYjq4JOPlXi0Hnqo1OXyMbF8=
+MIIDEzCCAfugAwIBAgIUGakmKYsdUCAj8yjITnuRZGcDhTYwDQYJKoZIhvcNAQEL
+BQAwGDEWMBQGA1UEAwwNY2x1c3Rlci5sb2NhbDAgFw0yMjEwMjAxNTM0MDBaGA8y
+Mjk2MDgwNDE1MzQwMFowGDEWMBQGA1UEAwwNY2x1c3Rlci5sb2NhbDCCASIwDQYJ
+KoZIhvcNAQEBBQADggEPADCCAQoCggEBAL6zoFZeO8K08P7nWl56oCfaoxXObQel
+14LOwAyZNCbk8sQiq/YWYxMPjkbhVO21l0IpzLoHTsymoOgDRm7yhYAuLj0FAkUM
+3BCgZL+k2rUrK0TwfjY7j19OKfZCSQamtebkzAhqsjeCycYwIDdwrJPM9tpS4BbZ
+DqatEk+N5HzxjVEH5DBmRRz6CZT7fzf9UlPmNfGcwzDd6h30lIZDOPsTmqu8pLTR
+edLfWWBAU19he3WiMzapGWwk2Apm2rAc89YgcqC8RKjojBPtv2Svq1VItYGNI93Q
+yl8OaW2Wti2isnxV3QCM4uG9uwyyeuU/F+qYkdL0dPvtqNQvkvDTDQcCAwEAAaNT
+MFEwHQYDVR0OBBYEFBg01sHeogy9p/j/1gw0EhsZRfJLMB8GA1UdIwQYMBaAFBg0
+1sHeogy9p/j/1gw0EhsZRfJLMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL
+BQADggEBALVmmK4cENDqKWx/Votg6OtMPvBfcMWR1+Gt8alTfA6VOjKTww18vwCU
+zdoLBQGcfp6aCtLj7leNtrsUhWEHgtl27hqD+cErEzbVyYwt9h1u82jCM0GLPcIU
+MFkZNqs+eIRlBA6V13Xx36/cgvM4NPj+7IFGpreuqYEp6TLmCTLQ76DbEnlbRMHK
+rhIZCyz5ZDwqf9UM6JsUVCagUve/eWDNfjSDWSN09BgFAVw7UjWgR/5NusVuoOhU
+txcv4bROe/ujv8wVOyUCeZLDLLvRi5cBBwWbvJsy+bqu0tt3gsAnrC6JRi4lQV/7
+Dix/DbJS6owBh3HDLPDiGeWS10U8n6Y=
 -----END CERTIFICATE-----

tests/testdata/certs/dns/cert-chain.pem

@@ -1,19 +1,19 @@
 -----BEGIN CERTIFICATE-----
-MIIDKzCCAhOgAwIBAgIUSolm1sWVWQlaC8av3xiZU7+fVTYwDQYJKoZIhvcNAQEL
-BQAwGDEWMBQGA1UEAwwNY2x1c3Rlci5sb2NhbDAgFw0yMjEwMjAwOTA3NTBaGA8y
-Mjk2MDgwNDA5MDc1MFowKzEpMCcGA1UEAwwgc2VydmVyLmRlZmF1bHQuc3ZjLmNs
-dXN0ZXIubG9jYWwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJr4I
-DSjxyiPRF+r/5qsgETKpNW2M1sQMz99H2Eofdqi6QuGM2lLyKoHTXKF9Akdaa7kJ
-EHQSMi57JyF5hzsMFWNfOiWX+PD2tCHXPgo7OZ4ddSJzKOExelinXKVdN9kDb57D
-WDjmTm69U141Poer5GAWjcY41skdS5ka/V29hFM5JUgdBNxvxV3yntMj+CwZdP2q
-/VLi2fDLgk5tuf9fQM4Ju5A/bOtyVCy8xtG8XetZpkizRf+yomcMDarWdP2rScmj
-WM4mP2krGWtbafvDM/Uz5rT/rkfvHcapMBXk/IVHV3jpAOry5uuH2x1uA+6C5nOj
-ZY6iWRkamBpL5M7xAgMBAAGjWDBWMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgXgMB0G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 A1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAdBgNVHREEFjAUghJzZXJ2ZXIu
-ZGVmYXVsdC5zdmMwDQYJKoZIhvcNAQELBQADggEBACcBvuiuHNuRpwlWPYkKbSHh
-WqCBOxIIjihBJ4bTm1SnKV9FVHmR7jCjFMpZumK6SqpeZm6k8IS0I1DfJ0/V9YPB
-ImRe5VDRz9EcK1Y590esZfe3b7O0+AULbKNdv7oP9EZMoB6tt9CpY3RKRntcs2fn
-jAsGFUuHZpBhTF8g2wFEIC08/n+hUo0Tvuw3vlJNjG5is5dzSBexr/ZMyiRiz5Zu
-eC/rwTWvC9ggGFIwriIPdyWyRjnprxiSD+fl2aCpoIll8k9wlpBiErPWmhX9ps1O
-3e5KodVIkZZfo075+TXziEbqFpKLj1POGrch0p6YHTAt/B1QnDanyGsEEQGAcfU=
+ZGVmYXVsdC5zdmMwDQYJKoZIhvcNAQELBQADggEBAAse3K4lbY9pavbAxK/X7HJ3
+mhKAT6INM/bwXRA2fmMI0ZyBLp2AToptEd+mRxCVwwd2+0wlFbkgk023Y3VBMKtd
+tYVN178Zmy+cJUEsXaA5gaHTG5v8iwCiewQNQcnFle2LXgvepXg/8yFMeYEIpzRs
+qcOkYo1vSZDnQ113GDAOUx2Avcv7+XeT7j+KMBP+6NqSTuIvnz1Sy319Bdsx58qf
+2Un2bIT9hk8gsx+PixrmZPsPEgTK/UE/nhyqSttYtz3EnSv+lTVNbQGuiQYvcDqG
+0dr9DSj6kYCaoADAxSrmBNYnJbswrX2MY2H9zRuq4cdoBvdhIwiALPs24auYKQo=
 -----END CERTIFICATE-----

tests/testdata/certs/dns/key.pem

@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEowIBAAKCAQEAsCa+CA0o8coj0Rfq/+arIBEyqTVtjNbEDM/fR9hKH3aoukLh
-jNpS8iqB01yhfQJHWmu5CRB0EjIueycheYc7DBVjXzoll/jw9rQh1z4KOzmeHXUi
-cyjhMXpYp1ylXTfZA2+ew1g45k5uvVNeNT6Hq+RgFo3GONbJHUuZGv1dvYRTOSVI
-HQTcb8Vd8p7TI/gsGXT9qv1S4tnwy4JObbn/X0DOCbuQP2zrclQsvMbRvF3rWaZI
-s0X/sqJnDA2q1nT9q0nJo1jOJj9pKxlrW2n7wzP1M+a0/65H7x3GqTAV5PyFR1d4
-6QDq8ubrh9sdbgPuguZzo2WOolkZGpgaS+TO8QIDAQABAoIBAQCAZ61stxMatgxH
-1lSSt/YUSRUR7YVu/fspj7omaA8YQmoaZLh/8YI3Ty8WANcjBi83RYE7j0fdH8Fs
-OokXSrGLTGgEuaE/19LnM0Xb3jidFZIhzQoQwkLty06mqU1N13EVJR+pLD1F/PSS
-hBwPWgaSEcbNiglt03wFI992oizcAUwrBz0ZBYyjbiVab5KSJMy7YpUgPyWLXZgn
-1XgoVrUn23ZeO+aPYZzjcww0is7nbp6vkIos9tsXfSm2b+KiNSVddY1gmTxTfwYL
-K18nVkwGF8UODrqulwOiPwi0xX6Gol8Gn17PoI031z6xZ85XJq5Cig7y2CrnfHNv
-BRyK4STVAoGBAOSvjEOdsJHRgCFg4cTP/g3Oy08MGr4uzUaRHBHiD/LM9kTT7pKA
-jz6axsKpPLkeLDaRLkeg6n/LsPDqdy45ZTEuiWTWa51jRjuq9Y+p9XZ1xKRIRwyU
-Q4yXPZvcm3ASWOSb0cP1wfWtPSw4qktTybP4NIvgmfR73I2TQFvwo4mPAoGBAMUw
-3dldL4hkpleiAgGJ1Gj1XJsE/6BCXUtNYF5p1e28DwgzoQj7MAadlSS3QJP+q0BD
-V4xPD3GSOJ+i47R0rg8PbJ36DHQRaWmMgBRJp7tMvUM5fIMA7POn+/k+P3AXNvX6
-628A3wBJlqgmqQ3/IObAmfynqIqrxVvw7VrTEN9/AoGASIxkjCLfnDMBWhV5Kk3t
-xAWhvA8UANeqKcPpSscT1iwtyIIPgoykZPEHM0QrTnMDBcCjFPg4zJgbJyLK8nAk
-6ShhUAsyErkm09EVnCEIDS+pVZDUcWorz9M/KU4gRbqcVtIUBv3VLZJrALdtVv5a
-0+xfBy0WylftDUD0vvYle4MCgYAv0EiK0yiaZuVarGLWIqiJhq0cvZqKLm1Wu/1Z
-B0qjKY1vjK1IczfS8tTeIT0cZYz6uRl6YRU6kZz/QEz8TaqC5leM+ruYTTyFJldM
-FAwCw3nE2iSR02ChOCNF7U0OjeJ6xIvfz5NDC5TnUvB8/1bn/N2ZwMGCVmI1h/bV
-pgYaWwKBgCzYn3jJKj+YSuAxlN5Cf9GL8WFnLvciAXrhJsQ2E/UTpvi7pA3QvD6y
-IogB3gP0bmyYZACMl+yNvjqECPCkPtZm4IzRxmIKBoxMRckRQ19aSbc+CALETLkp
-aTnAb40jiHkk1O96V+tewT39zHgaq/IX3uJrowjIbwsisa5lGYMn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 -----END RSA PRIVATE KEY-----

tests/testdata/certs/dns/root-cert.pem

@@ -1,19 +1,19 @@
 -----BEGIN CERTIFICATE-----
-MIIDEzCCAfugAwIBAgIUEYOnqyP/kjrOd3CfHA7D0TWEtnEwDQYJKoZIhvcNAQEL
-BQAwGDEWMBQGA1UEAwwNY2x1c3Rlci5sb2NhbDAgFw0yMjEwMjAwOTA3NTBaGA8y
-Mjk2MDgwNDA5MDc1MFowGDEWMBQGA1UEAwwNY2x1c3Rlci5sb2NhbDCCASIwDQYJ
-KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMQwa+3fY1hOjQOfwwDNoS350nLKMa/4
-S7VUzLwSSCUoCpk6YelEaheqgfZE8YN8ODSBOWuOsFXNvDtAqwGq2bNeYvCWryy6
-ySTn0kwNhQgBlUDUqr0wvotGghzTH/PXYCp+INGOm675enn+diMOvt4SPjh4Dr+W
-JFI7Nf0MVwjFmog4juG2EgXEG3gDO0tr7WHe5ZUuyxE4DbyvRZkZPsmVyctok9mj
-ZmUqiNlVhPSxi4qw6PMcX/tQ8LufgCp45tI6S25XU0wOXydZXwkX7bGOH1sjhOFh
-KqEkkQj1MjC/RcrGQRPoW09UDmB+Kzks//P1yu2Ew2ujF8r7i+9J3VcCAwEAAaNT
-MFEwHQYDVR0OBBYEFEzCXbzY+R7vft1VCAa+GWwUXJZ5MB8GA1UdIwQYMBaAFEzC
-XbzY+R7vft1VCAa+GWwUXJZ5MA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL
-BQADggEBAILlloljE4ZChm0PN+esGbx2paacsq/JMMKey3TWjb4rqrgIBRcQ1zgz
-7yREUqWiZpUcVTwo1J9tX5ngkqemXwJMhCGcjW7F6b7+7vJDoRSNrQP79z7WOaq1
-No3aB4KtHt6q7/BOYGecLOJnce8dQgnfAht88xzqKDjBLm1qpLJMqb8EGl8OuneO
-ULizOCHHUnuqWOmu9lo8NoO2DaWpBs/mLsd1ff/nnlz00dwFq1kzALlktk+naF5K
-kDftUSTFKcfbBHHYWeCE/CBuZALsGDlpwa9mPIx80NyeViVDGTBbwc1wXJNsayS4
-xzuV17cTYjq4JOPlXi0Hnqo1OXyMbF8=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 -----END CERTIFICATE-----

tests/testdata/certs/generate.sh

@@ -111,12 +111,12 @@ cp "${WD}/pilot/root-cert.pem" "${WD}/mountedcerts-client/root-cert.pem"
 
 # Create a server certificate
 openssl genrsa -out "${WD}/pilot/key.pem" 2048
-openssl req -new -sha256 -key "${WD}/pilot/key.pem" -out "${WD}/server.csr" -subj "/CN=cluster.local" -config "${WD}/server.conf"
+openssl req -new -sha256 -key "${WD}/pilot/key.pem" -out "${WD}/server.csr" -subj "/CN=istiod.istio-system.svc.cluster.local" -config "${WD}/server.conf"
 openssl x509 -req -in "${WD}/server.csr" -CA "${WD}/pilot/root-cert.pem" -CAkey "${WD}/pilot/ca-key.pem" -CAcreateserial -out "${WD}/pilot/cert-chain.pem"  -days 100000 -extensions v3_req -extfile "${WD}/server.conf"
 
 # Create a client certificate
 openssl genrsa -out "${WD}/default/key.pem" 2048
-openssl req -new -sha256 -key "${WD}/default/key.pem" -out "${WD}/client.csr" -subj "/CN=cluster.local" -config "${WD}/client.conf"
+openssl req -new -sha256 -key "${WD}/default/key.pem" -out "${WD}/client.csr" -subj "/CN=default.default.svc.cluster.local" -config "${WD}/client.conf"
 openssl x509 -req -in "${WD}/client.csr" -CA "${WD}/pilot/root-cert.pem" -CAkey "${WD}/pilot/ca-key.pem" -CAcreateserial -out "${WD}/default/cert-chain.pem" -days 100000 -extensions v3_req -extfile "${WD}/client.conf"
 
 # Create a DNS client certificate